Almeida Law Group is investigating a data breach at acima. If you believe you were affected, contact Almeida Law Group.
About acima
Acima is a lease-to-own brand operated by Upbound Group, Inc. (NASDAQ: UPBD), a financial services company headquartered in Plano, Texas. Upbound Group, formerly known as Rent-A-Center, also operates the Rent-A-Center and Brigit brands and runs approximately 1,930 corporate and 400 franchise locations across the United States, Mexico, and Puerto Rico. Acima provides lease-to-own payment options through partnerships with third-party retailers and e-commerce sites, serving consumers who may not qualify for traditional financing to obtain merchandise such as furniture, electronics, appliances, and tires.
What Happened?
Acima was listed as a victim on the dark web leak site of a ransomware group identified as “iah6477,” with the claim first observed on August 20th, 2026. The group alleges it obtained 2.1 TiB of data from Acima’s systems. These are attacker-side allegations and have not been confirmed by Upbound Group.
Separately, Upbound Group disclosed the underlying breach to the U.S. Securities and Exchange Commission via an 8-K filing on July 21st, 2026. The company stated that cybersecurity incidents resulted in unauthorized access to “certain non-sensitive customer information and other documents.” Upbound Group reported that the stolen information was subsequently used to facilitate fraudulent lease-to-own agreements, contributing to approximately $13 million in fraudulent contract losses in the Acima segment during the second quarter of 2026. Notably, as of earlier reporting by SecurityWeek and BleepingComputer in late July 2026, no ransomware or data extortion group had publicly claimed the attack at that time — the iah6477 claim appeared later, in August 2026. Upbound notified federal law enforcement and engaged outside cybersecurity experts. Remediation steps included enhanced authentication controls, improved fraud detection tools, and expanded monitoring. The company characterized the incidents as not material in its SEC filing, while noting it would reassess that determination if the facts changed. The total number of affected individuals has not been publicly disclosed. At least one law firm has announced a lawsuit investigation related to this incident, though no filed class action has been confirmed.
Key Facts at a Glance
- Company or Organization: Acima (operated by Upbound Group, Inc.)
- Industry: Financial Services / Consumer Finance / Lease-to-Own
- Location: Plano, Texas
- Incident type: Unauthorized access to customer information; subsequent ransomware group claim
- Date of consumer notification: July 21st, 2026 (SEC 8-K filing)
- Prior breach: No prior breaches for Upbound Group or Acima identified
- Litigation status: At least one law firm (ClaimDepot) has announced a lawsuit investigation; no filed class action confirmed
- Source: Corroborated ransomware report (iah6477 claim, Ransomware.live); SecurityWeek: securityweek.com; BleepingComputer: bleepingcomputer.com
What Should You Do?
If you believe you may have been affected by this breach, you should monitor your financial accounts closely for any unfamiliar or unauthorized activity, including unexpected lease agreements or credit inquiries. You can place a free fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to help prevent new accounts from being opened in your name. You are also entitled to a free annual credit report from each bureau at AnnualCreditReport.com. If you discover signs of fraud or identity theft, visit IdentityTheft.gov for step-by-step guidance and to report the activity to the Federal Trade Commission.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
